CVE-2015-0410: Medium severity Google Android vulnerability

Published Jan 21, 2015

Updated

Unspecified vulnerability in the Java SE, Java SE Embedded, JRockit component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows remote attackers to affect availability via unknown vectors related to Security.

Affected Software

27 affected components

Google Android

Oracle JDK=1.5.0-update75

Oracle JDK=1.6.0-update85

Oracle JDK=1.7.0-update71

Oracle JDK=1.7.0-update72

Oracle JDK=1.8.0-update25

Oracle JDK=1.8.0-update6

Oracle JRE=1.5.0-update75

Oracle JRE=1.6.0-update85

Oracle JRE=1.7.0-update71

Oracle JRE=1.7.0-update72

Oracle JRE=1.8.0-update25

Oracle JRE=1.8.0-update6

Oracle Jrockit=r27.8.4

Oracle Jrockit=r28.3.4

Canonical Ubuntu Linux=10.04

Canonical Ubuntu Linux=12.04

Canonical Ubuntu Linux=14.04

Canonical Ubuntu Linux=14.10

Debian Debian Linux=7.0

Debian Debian Linux=8.0

Novell Suse Linux Enterprise Desktop=11.0-sp3

Novell Suse Linux Enterprise Server=12.0

openSUSE openSUSE=13.2

redhat Enterprise Linux=5.0

redhat Enterprise Linux=6.0

redhat Enterprise Linux=7.0

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

Event History

Jan 21, 2015

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Nov 7, 2016

Data Sourced

via Android·12:00 AM

SeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2015-0410?

CVE-2015-0410 has been categorized with a high severity due to its impact on software availability.

How do I fix CVE-2015-0410?

To mitigate CVE-2015-0410, you should update to the latest version of Java SE or JRockit that addresses this vulnerability.

Which software versions are affected by CVE-2015-0410?

CVE-2015-0410 affects Oracle Java SE 5.0u75 to 8u25, Java SE Embedded 7u71 and 8u6, and specific versions of JRockit.

Is there a workaround for CVE-2015-0410?

There are no recommended workarounds for CVE-2015-0410; applying the appropriate updates is the best course of action.

Can CVE-2015-0410 be exploited remotely?

Yes, CVE-2015-0410 can be exploited by remote attackers, which poses a risk to affected systems.